Overview

overview

6

Static

static

3

13ef438c77...47.exe

windows7-x64

6

13ef438c77...47.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 09:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    13ef438c778d6edbe0f8b9ca94280247.exe

  • Size

    890KB

  • MD5

    13ef438c778d6edbe0f8b9ca94280247

  • SHA1

    f9b9ade83979cd709619f6dd24763743ddca3712

  • SHA256

    eb0ccb2ca22e507659d0ee4942c4a130bcc1117c216015c55c1f76ae8a0040e4

  • SHA512

    6dff9bd44bbceb4aeab98096fbe28ca288ead0c538c5aab4fd1a31f39f5aa5c9a5dd517970bd0b8aa2b3182ef066f7e19fd5ef4311bfce5f602ba5353ff88dd6

  • SSDEEP

    12288:PkXzBWu2LgRZhKH90BCxV3sdAIXCSZn6sIoIAoWC2C45PFm39+eMYdhEUNQyhK:Pk1lRnKHmKVcd9PZ43b432MGFhK

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\13ef438c778d6edbe0f8b9ca94280247.exe
    "C:\Users\Admin\AppData\Local\Temp\13ef438c778d6edbe0f8b9ca94280247.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2888-0-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

    Download